HP ProCurve series 2500

To Next Page

To Previous Page

7-40

Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access

Using IP Authorized Managers

Using Passwords, Port

Security, and Authorized IP

Main Page

Preface5
- Table of Contents7
1 : Selecting a Management Interface19
Chapter Contents19
Overview20
Understanding Management Interfaces20
Advantages of Using the Menu Interface21
Advantages of Using the CLI22
- CLI Usage22
Advantages of Using the HP Web Browser Interface23
Advantages of Using HP Toptools for Hubs & Switches24
- Chapter Contents27
Using the Menu Interface28
Overview28
Starting and Ending a Menu Session29
- How to Start a Menu Interface Session30
- How to End a Menu Session and Exit from the Console31
Main Menu Features33
Screen Structure and Navigation35
Rebooting the Switch38
Menu Features List40
Where to Go from here41
Accessing the CLI44
Using the CLI44
- Privilege Levels at Logon45
- Privilege Level Operation46
- How to Move between Levels49
- Moving between the CLI and the Menu Interface49
- Changing Parameter Settings49
- Listing Commands and Command Options50
- Displaying CLI "Help53
- Listing Command Options53
- Displaying Command-List Help53
- Displaying Help for an Individual Command54
- Configuration Commands and the Context Configuration Modes55
- Port or Trunk-Group Context55
- VLAN Context57
Using the Command Line Interface (CLI)44
Overview44
CLI Control and Editing58
Using the HP Web Browser Interface59
Chapter Contents59
Overview60
General Features61
Web Browser Interface Requirements62
Starting an HP Web Browser Interface Session with the Switch63
- Using a Standalone Web Browser in a PC or UNIX Workstation63
- Using HP Toptools for Hubs & Switches64
Tasks for Your First HP Web Browser Interface Session66
- Viewing the "First Time Install" Window66
  - Creating Usernames and Passwords in the Browser Interface67
  - Online Help for the HP Web Browser Interface70
Support/Mgmt Urls Feature71
- Support URL72
- Help and the Management Server URL72
- Providing Online Help72
- If Online Help Fails to Operate72
- Policy Management and Configuration73
Status Reporting Features74
- The Overview Window74
- The Port Utilization and Status Displays75
- The Alert Log78
- The Status Bar81
- Setting Fault Detection Policy82
Configuring IP Addressing, Interface Access, and System Information85
Chapter Contents85
Overview86
IP Configuration87
- Just Want a Quick Start88
- IP Addressing with Multiple Vlans88
- IP Addressing in a Stacking Environment89
- Menu: Configuring IP Address, Gateway, Time-To-Live (TTL)89
- CLI: Configuring IP Address, Gateway, Time-To-Live (TTL)91
- And Timep91
- Web: Configuring IP Addressing94
- How IP Addressing Affects Switch Operation94
  - Dhcp/Bootp Operation95
  - Network Preparations for Configuring Dhcp/Bootp98
- Globally Assigned IP Network Addresses99
Interface Access: Console/Serial Link, Web, and Inbound Telnet100
And Inbound Telnet101
- Menu: Modifying the Interface Access101
- CLI: Modifying the Interface Access102
System Information105
- Menu: Viewing and Configuring System Information106
- CLI: Viewing and Configuring System Information107
- Web: Configuring System Parameters109
Optimizing Port Usage through Traffic Control and Port Trunking111
Chapter Contents111
Overview112
Viewing Port Status and Configuring Port Parameters112
- Menu: Viewing Port Status and Configuring Port Parameters115
- CLI: Viewing Port Status and Configuring Port Parameters116
- Web: Viewing Port Status and Configuring Port Parameters119
Port Trunking120
- Switch 2512 and 2524 Port Trunk Features and Operation121
- Trunk Configuration Methods122
- Menu: Viewing and Configuring a Static Trunk Group126
  - Check the Event Log (Page 11-11) to Verify that the Trunked Ports Are Operating Properly128
- CLI: Viewing and Configuring a Static or Dynamic Port Trunk Group128
- Web: Viewing Existing Port Trunk Groups133
- Trunk Group Operation Using LACP134
- How the Switch Lists Trunk Data138
- Outbound Traffic Distribution Across Trunked Links138
7 : Using Passwords, Port Security, and Authorized IP141
Managers to Protect against Unauthorized Access141
Chapter Contents141
- Using Passwords, Port Security, and Authorized Ip Managers to Protect against Unauthorized Access141
Overview143
Using Password Security144
- Menu: Setting Manager and Operator Passwords145
- CLI: Setting Manager and Operator Passwords147
- Web: Configuring User Names and Passwords148
Configuring and Monitoring Port Security149
- Basic Operation149
  - Blocking Unauthorized Traffic150
  - Trunk Group Exclusion151
- Planning Port Security151
- CLI: Port Security Command Options and Operation153
  - CLI: Displaying Current Port Security Settings156
  - CLI: Configuring Port Security157
- Web: Displaying and Configuring Port Security Features161
- Reading Intrusion Alerts and Resetting Alert Flags162
- Operating Notes for Port Security168
- Web: Checking for Intrusions, Listing Intrusion Alerts, and Resetting168
- Alert Flags168
Using IP Authorized Managers170
- Access Levels171
- Defining Authorized Management Stations171
  - Overview of IP Mask Operation172
- Menu: Viewing and Configuring IP Authorized Managers173
- CLI: Viewing and Configuring Authorized IP Managers174
  - Listing the Switch's Current Authorized IP Manager(S)174
  - Configuring IP Authorized Managers for the Switch175
- Web: Configuring IP Authorized Managers176
- Building IP Masks176
- Operating and Troubleshooting Notes179
8 : Configuring for Network Management Applications181
Chapter Contents181
Overview182
SNMP Management Features183
Configuring for SNMP Access to the Switch184
SNMP Communities186
- Menu: Viewing and Configuring SNMP Communities186
  - To View, Edit, or Add SNMP Communities186
- CLI: Viewing and Configuring Community Names188
Trap Receivers and Authentication Traps190
- CLI: Configuring and Displaying Trap Receivers191
  - Using the CLI to List Current SNMP Trap Receivers191
  - Configuring Trap Receivers192
- Using the CLI to Enable Authentication Traps192
Advanced Management: RMON and HP Extended RMON Support193
RMON Support193
- Rmon193
- Extended RMON193
9 : Configuring Advanced Features195
Chapter Contents195
Overview198
HP Procurve Stack Management199
- Which Devices Support Stacking200
- Components of HP Procurve Stack Management201
- General Stacking Operation201
- Operating Rules for Stacking202
  - General Rules202
  - Specific Rules203
- Overview of Configuring and Bringing up a Stack205
  - General Steps for Creating a Stack207
- Using the Menu Interface to View Stack Status and Configure Stacking209
  - Using the Menu Interface to View and Configure a Commander Switch209
  - Using the Menu to Manage a Candidate Switch211
- Using the Commander to Manage the Stack213
- Monitoring Stack Status222
- Using the CLI to View Stack Status and Configure Stacking226
- SNMP Community Operation in a Stack240
- Using the CLI to Disable or Re-Enable Stacking241
- Transmission Interval241
- Stacking Operation with Multiple Vlans Configured241
- Web: Viewing and Configuring Stacking242
- Status Messages243
Port-Based Virtual Lans (Static Vlans)244
- Overview of Using Vlans247
- Menu: Configuring VLAN Parameters251
- CLI: Configuring VLAN Parameters256
- Web: Viewing and Configuring VLAN Parameters262
- VLAN Tagging Information263
- Effect of Vlans on Other Switch Features267
- VLAN Restrictions269
  - Symptoms of Duplicate MAC Addresses in VLAN Environments270
Gvrp271
- General Operation272
- Per-Port Options for Handling GVRP "Unknown Vlans274
- Per-Port Options for Dynamic VLAN Advertising and Joining276
- GVRP and VLAN Access Control277
  - Port-Leave from a Dynamic VLAN277
- Planning for GVRP Operation278
- Configuring GVRP on a Switch278
- GVRP Operating Notes283
Multimedia Traffic Control with IP Multicast (IGMP)285
- IGMP Operating Features286
- CLI: Configuring and Displaying IGMP287
- Web: Enabling or Disabling IGMP291
- How IGMP Operates291
Spanning Tree Protocol (STP)296
- Menu: Configuring STP297
- CLI: Configuring STP299
- Web: Enabling or Disabling STP302
- How STP Operates302
Chapter Contents308
10 : Monitoring and Analyzing Switch Operation308
Overview308
Status and Counters Data309
- Menu Access to Status and Counters310
- General System Information311
  - Menu Access311
  - CLI Access311
- Switch Management Address Information312
  - CLI Access312
  - Menu Access312
- Port Status313
- Viewing Port and Trunk Group Statistics314
- Viewing the Switch's MAC Address Tables317
  - Menu Access to the MAC Address Views and Searches318
  - CLI Access for MAC Address Views and Searches320
- Spanning Tree Protocol (STP) Information321
  - Menu Access to STP Data321
  - CLI Access to STP Data322
- Internet Group Management Protocol (IGMP) Status323
- VLAN Information323
- VLAN Information324
- Web Browser Interface Status Information326
Port Monitoring Features327
- Menu: Configuring Port Monitoring328
- CLI: Configuring Port Monitoring330
- Web: Configuring Port Monitoring332
Chapter Contents334
11 : Troubleshooting334
Overview334
Troubleshooting Approaches335
Browser or Console Access Problems336
Unusual Network Activity338
- General Problems338
- IGMP-Related Problems339
- Problems Related to Spanning-Tree Protocol (STP)340
- Stacking-Related Problems340
- Timep or Gateway Problems340
- VLAN-Related Problems341
Using the Event Log to Identify Problem Sources343
- Menu: Entering and Navigating in the Event Log344
- Cli345
Diagnostic Tools346
- Ping and Link Tests346
- Displaying the Configuration File350
  - CLI: Viewing the Configuration File350
  - Web: Viewing the Configuration File350
- CLI Administrative and Troubleshooting Commands351
Restoring the Factory-Default Configuration352
- CLI: Resetting to the Factory-Default Configuration352
- Clear/Reset: Resetting to the Factory-Default Configuration352
C: Switch Memory and Configuration353
A: Transferring an Operating System or Startup353
Appendix Contents353
- Transferring Switch Configurations353
Configuration File353
Appendix Contents354
Overview354
Downloading an Operating System (os354
- Using TFTP to Download the os File from a Server355
  - Menu: TFTP Download from a Server356
  - CLI: TFTP Download from a Server357
- Using the SNMP-Based Software Update Utility358
- Series 2500 Switch-To-Switch Download358
  - Menu: Switch-To-Switch Download358
  - CLI: Switch-To-Switch Download359
- Using Xmodem to Download the os File from a PC359
  - Menu: Xmodem Download359
  - CLI: Xmodem Download from a PC or Unix Workstation360
Troubleshooting TFTP Downloads361
Transferring Switch Configurations362
B: MAC Address Management365
Appendix B Contents365
Overview365
Determining MAC Addresses366
- Menu: Viewing the Switch's MAC Addresses367
- CLI: Viewing the Port and VLAN MAC Addresses368
Appendix Contents369
Appendix Contents370
Overview370
Overview of Configuration File Management370
Using the CLI to Implement Configuration Changes372
Configuration Changes375
Using the Menu and Web Browser Interfaces to Implement Configuration Changes375
- Using the Menu Interface to Implement Configuration Changes375
  - Rebooting from the Menu Interface377
- Using the Web Browser Interface to Implement Configuration Changes378
- Changes378
D: Daylight Savings Time on HP Procurve Switches379

HP ProCurve series 2500 - Page 180

Table of Contents

Related product manuals